Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/jMeaJHAlpUoXwixuNHAJlcbsr9A.roa
File: jMeaJHAlpUoXwixuNHAJlcbsr9A.roa (raw, json)
Hash identifier: C6jVOj4ame+Xkj4ACcIbbvtCLZuZKfhHVGfROKrXK4Y=
Subject key identifier: 8C:C7:9A:24:70:25:A5:4A:17:C2:2C:6E:34:70:09:95:C6:EC:AF:D0
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 07B97DCB
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/jMeaJHAlpUoXwixuNHAJlcbsr9A.roa
Signing time: Sat 01 Jan 2022 07:03:29 +0000
ROA not before: Sat 01 Jan 2022 07:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43905
IP address blocks: 185.84.12.0/22 maxlen: 22
217.173.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129596875 (0x7b97dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Jan 1 07:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cc79a247025a54a17c22c6e34700995c6ecafd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:77:16:56:4b:2b:45:26:4c:95:b0:38:22:
71:19:30:ed:31:9d:88:b5:14:1f:6a:7c:4f:df:58:
8a:cf:79:6b:72:63:52:a4:4c:8e:50:94:97:08:a9:
fb:36:7a:65:72:ce:1e:57:50:6d:49:f3:91:e3:ac:
8e:47:1c:d1:60:17:1d:99:04:b5:21:65:c7:23:b3:
f4:e9:5d:a3:44:45:0e:ea:fd:4e:53:17:71:40:80:
3f:af:ac:07:cd:5a:75:a0:09:88:0b:20:dd:4b:45:
23:4f:db:ac:73:72:05:b2:d7:a1:47:b6:a1:85:3b:
ef:88:85:69:a3:0f:91:37:66:09:0b:68:ad:f4:dd:
98:9c:31:15:ad:a2:cb:f7:0d:b4:02:48:23:2d:1f:
4f:f3:67:44:48:e7:83:df:90:c4:ab:62:e9:d5:12:
b8:e4:49:1c:1c:4b:a6:0d:bd:2a:c9:5b:69:78:0d:
d1:7f:f4:1e:99:ae:74:43:89:d8:b0:da:97:2b:36:
72:0e:b9:a1:cf:fc:72:de:51:eb:87:71:92:14:da:
b7:92:6c:0d:67:41:64:8c:89:68:ee:94:a7:62:d0:
47:38:bc:5e:ad:ed:11:fc:74:29:8b:9e:5c:fc:d4:
ae:3b:4f:23:23:75:45:5b:90:e2:22:7a:d9:1a:f2:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:9A:24:70:25:A5:4A:17:C2:2C:6E:34:70:09:95:C6:EC:AF:D0
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/jMeaJHAlpUoXwixuNHAJlcbsr9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.12.0/22
217.173.61.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4c:e9:bd:59:5e:8f:3a:c4:5a:66:9f:7c:a8:07:4e:27:d7:
56:07:7e:f5:90:8c:44:f5:06:f3:37:3c:b0:fa:fd:34:79:c2:
f3:0b:72:4e:ba:8d:43:6d:88:63:80:69:6b:0f:ac:53:df:03:
65:83:15:33:41:b8:d7:42:59:6f:70:17:6f:02:c0:ed:19:e9:
c1:52:65:7d:72:a2:14:45:81:9b:25:72:84:66:84:cd:c5:f9:
eb:ee:21:fa:b2:a7:22:2a:f2:0b:19:10:ff:da:43:e6:3b:f4:
f1:a6:7b:1d:9d:f6:a1:c9:76:a9:69:3c:27:8b:a8:05:4c:fb:
e3:3a:c8:61:6a:da:c5:a5:a0:62:7d:8b:3d:64:81:c2:25:7f:
e6:5c:dd:9b:57:94:dc:95:b9:89:13:49:bc:54:4d:80:e6:a8:
18:6c:3c:06:2e:40:d3:e4:bd:f9:59:61:67:f1:ff:53:55:45:
20:c8:84:80:37:ce:e1:d2:18:d9:e5:6e:6a:80:ea:f7:37:d1:
df:1c:fb:d4:72:f0:12:98:3b:b8:cd:7e:21:46:47:e8:2b:79:
ef:18:77:69:ee:98:a9:24:b2:6f:4e:26:b6:ff:fb:5a:94:f8:
36:a9:bf:05:f4:e2:3c:8e:65:f1:c4:9a:3a:cd:0f:61:ee:47:
73:ca:ce:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:31 2025 by rpki-client